nm77 Privacy Policy – How We Collect, Use, and Protect Your Data

1 Introduction

This Privacy Policy ("Policy") describes how nm77 ("nm77", "we", "us", "our") collects, uses, stores, shares, and protects the personal information of users ("Player", "User", "you") who register for, access, or use the nm77.ws platform, including all associated services such as casino games, sports betting, virtual sports, payment processing, and customer support channels.

nm77 is committed to handling your personal data with integrity, transparency, and care. We recognise that the players who trust us with their information deserve to know exactly how that information is used. This Policy is written in plain, formal English so that it is accessible and unambiguous to all nm77 players in Bangladesh.

By registering an nm77 account or continuing to use the nm77 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the nm77 platform.

2 Personal Data We Collect

nm77 collects personal data through several channels. The categories of data we collect, and the source of that data, are set out in the table below:

nm77 does not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (beyond document photographs required for identity verification), or health data, except where strictly required by law or with your explicit consent.

3 How We Use Your Personal Data

nm77 uses the personal data it collects for the following specific and lawful purposes:

• Account Registration and Management: To create, maintain, and administer your nm77 player account, including processing your registration details, managing your account balance, and enabling login access.
• Identity Verification (KYC): To verify your identity and age (21+) in accordance with responsible gaming requirements and to prevent the use of the platform by ineligible persons.
• Payment Processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported bank transfers in Bangladeshi Taka (৳), and to maintain accurate transaction records.
• Platform Services: To provide access to casino games, sports betting markets, virtual sports, live dealer games, and all other nm77 platform features.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover attempts, and other prohibited conduct as defined in the nm77 Terms & Conditions.
• Responsible Gaming: To monitor gameplay patterns that may indicate problem gambling behaviour, to enforce player-requested limits and self-exclusions, and to provide responsible gaming interventions where appropriate.
• Customer Support: To respond to your support queries, complaints, and dispute submissions in a timely and effective manner.
• Legal Compliance: To comply with applicable laws, regulations, court orders, and the lawful requests of relevant authorities.
• Platform Improvement: To analyse aggregate usage patterns and technical performance data for the purpose of improving nm77 platform features, stability, and user experience. This analysis uses anonymised or pseudonymised data wherever possible.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates by email or on-platform notification, subject to your communication preferences. You may opt out of marketing communications at any time by contacting [email protected].

4 Legal Basis for Processing

nm77 processes your personal data on the following legal grounds, depending on the specific purpose of the processing activity:

• Contractual Necessity: Processing required to perform the contract between you and nm77 — including account registration, payment processing, game provision, and customer support — is carried out on the basis that it is necessary to fulfil our contractual obligations to you.
• Legal Obligation: Certain processing activities, including identity verification, transaction monitoring, and the retention of financial records, are carried out to comply with applicable legal and regulatory requirements.
• Legitimate Interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and internal analytics is based on nm77's legitimate interests in operating a safe, reliable, and compliant platform, provided those interests are not overridden by your data rights.
• Consent: Where no other legal basis applies — for example, in relation to certain marketing communications — nm77 will seek your explicit consent before processing. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5 Cookies and Tracking Technologies

nm77.ws uses cookies and similar tracking technologies to improve platform functionality, remember your preferences, maintain your session security, and collect anonymous analytics data. The categories of cookies used are as follows:

• Strictly Necessary Cookies: These cookies are essential for the nm77 platform to function. They enable core features such as session authentication, cashier functionality, and game loading. These cookies cannot be disabled without rendering the platform inoperable.
• Functional Cookies: These cookies remember your preferences and settings, such as your preferred language and display options, to provide a personalised experience.
• Analytics Cookies: These cookies collect anonymised information about how players interact with nm77.ws — including pages visited, time spent, and navigation paths — to help us improve the platform. The data collected is aggregated and does not identify individual users.
• Security Cookies: These cookies assist in detecting and preventing fraudulent access attempts, bot activity, and unauthorised account access.

You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use the nm77 platform. Disabling analytics or functional cookies will not prevent you from using the platform but may affect your experience.

6 Third-Party Data Sharing

nm77 does not sell or rent your personal data to any third party. We may share your data with third parties only in the following strictly defined circumstances:

• Payment Service Providers: Your financial data is shared with payment processors (including bKash, Nagad, Rocket, Upay, and partner banks) solely to the extent required to process your deposits and withdrawals. These providers process your data under their own privacy policies and applicable financial regulations.
• Identity Verification Services: Your identity documents may be shared with third-party KYC and age-verification service providers who assist nm77 in verifying the accuracy of the information you provide during registration.
• Fraud Prevention and Security Partners: Technical data such as IP addresses and device fingerprints may be shared with fraud-detection platforms to identify and prevent malicious activity on nm77.ws.
• Legal and Regulatory Authorities: nm77 will disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities when required to do so by applicable law, court order, or regulatory direction. nm77 will only share the minimum data necessary to satisfy the legal request.
• Technology Infrastructure Providers: Hosting, cloud infrastructure, and platform support providers may have limited access to personal data as part of their contracted services. All such providers are bound by confidentiality obligations and are not permitted to use your data for any purpose other than providing the contracted services to nm77.

nm77 does not share your data with third-party advertisers, data brokers, or marketing networks under any circumstances.

7 Data Security

nm77 implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, destruction, and disclosure. Our security measures include:

• 256-bit SSL/TLS Encryption: All data in transit between your device and nm77 servers is encrypted using industry-standard Transport Layer Security (TLS) protocols.
• Access Controls: Access to personal data within nm77's systems is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged and subject to regular audit.
• Data Encryption at Rest: Sensitive personal data, including identity documents and financial account references, is encrypted in storage.
• Intrusion Detection: nm77 operates continuous network monitoring and intrusion detection systems to identify and respond to security threats in real time.
• Regular Security Reviews: nm77 conducts periodic security assessments and vulnerability reviews of its platform infrastructure.

In the event of a data breach that is likely to result in a risk to your rights and interests, nm77 will notify affected players as promptly as practicable and will take all reasonable steps to contain and remediate the breach.

8 Data Retention

nm77 retains personal data for no longer than is necessary for the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account Data: Retained for the duration of your active account relationship with nm77, plus a minimum period of 5 years following account closure, to meet legal and regulatory record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of the transaction, in compliance with applicable financial record-keeping obligations.
• KYC and Identity Documents: Retained for a minimum of 5 years following account closure or the completion of the KYC process, whichever is later.
• Customer Support Records: Retained for 3 years from the date of the last interaction, unless a longer period is required to resolve an ongoing dispute.
• Technical and Usage Logs: Retained for up to 12 months, after which they are either deleted or anonymised for aggregate analytics purposes.
• Marketing Preference Records: Retained for the duration of your account, or until you withdraw consent for marketing communications, whichever comes first.

When personal data is no longer required, nm77 securely deletes or irreversibly anonymises it in accordance with established data destruction procedures.

9 Your Data Rights

As an nm77 player, you hold the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request" and your registered account username:

• Right of Access: You have the right to request a copy of the personal data nm77 holds about you, along with information about how that data is being used.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to Erasure: In certain circumstances, you may request that nm77 delete your personal data. This right is subject to our legal obligations to retain certain records and to our legitimate interests in fraud prevention.
• Right to Restriction of Processing: You may request that nm77 restrict the processing of your data in defined circumstances, such as while a data accuracy dispute is under review.
• Right to Data Portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you may request that your data be provided to you in a structured, machine-readable format.
• Right to Withdraw Consent: Where processing is based solely on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to Object to Marketing: You may opt out of receiving marketing communications from nm77 at any time by contacting [email protected].

10 Children's Privacy and the 21+ Rule

nm77 is an adults-only platform. We do not knowingly collect, store, or process the personal data of any person under the age of 21. The nm77 registration process includes an age declaration step, and all accounts are subject to age verification as part of our KYC procedures.

If nm77 becomes aware that personal data belonging to a person under the age of 21 has been collected — whether through misrepresentation during registration or any other means — we will immediately close the relevant account, return any deposited real-money funds to the originating payment method (less amounts already wagered), and securely delete all personal data associated with that account.

If you believe a person under 21 has registered an nm77 account, please contact [email protected] immediately so that we can take appropriate action without delay.

11 International Data Transfers

nm77 primarily stores and processes player data on servers located in secure data centre facilities. In the ordinary course of operating the platform, certain personal data may be accessed by or transferred to service providers located outside Bangladesh — for example, cloud infrastructure providers or fraud prevention partners operating in other jurisdictions.

Where such transfers occur, nm77 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that described in this Policy. These safeguards may include contractual data protection clauses, vendor security certifications, and restricted data access controls.

By using the nm77 platform and agreeing to this Privacy Policy, you acknowledge that your personal data may be transferred and processed in jurisdictions outside Bangladesh for the purposes described herein, subject to the safeguards outlined above.

12 Changes to This Privacy Policy

nm77 reserves the right to amend this Privacy Policy at any time to reflect changes in our data practices, applicable legal requirements, or platform services. When material changes are made, we will:

• Publish the updated Policy at nm77.ws/privacy-policy with a revised "Last Updated" date
• Display a notice on the nm77 platform informing players of the update
• Where practicable, send an email notification to the address registered on your account

Your continued use of the nm77 platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any material change, you should cease using the platform and may request voluntary account closure by contacting [email protected].

We encourage all nm77 players to review this Policy periodically to stay informed about how we are protecting their personal information.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way nm77 processes your personal data, please contact our privacy and data support team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Requests: "Data Rights Request – [Your Username]"
• Response Time: Privacy queries are acknowledged within 2 business hours and substantively responded to within 30 days.
• Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6).
• Language: Support is provided in English.